ABAP Command Injection: how to change the productive SAP system

preview_player
Показать описание
ABAP Command Injection translates to: a developer has added code that allows to add more code at a later point in time. You don't need developer keys for that. Thus you can exploit this backdoor even if the system is configured as not changeable. Even worse: even SAP standard code can be changed. This means that an attacker can use the backdoor to do whatever he wants in the vulnerable SAP system. Compliance is lost immediately, your next IT audit is in danger!

Watch out for dangerous ABAP commands that allow an ABAP command injection!
  1. Virtual Forge an Onapsis Company
  2. ABAP Command Injection
  3. ABAP
  4. Security
  5. quality
  6. compliance
Рекомендации по теме
ABAP Command Injection: 0:02:06

ABAP Command Injection: how to change the productive SAP system

EP12 - How 0:03:32

EP12 - How to call External OS Command

SAP Code Injection 0:01:25

SAP Code Injection Vulnerability (CVE-2019-0328)

64. Command Injection 0:04:49

64. Command Injection - Overview

SAP ABAP - 0:13:16

SAP ABAP - SM69 External Operating System Commands

66. Command Injection 0:04:11

66. Command Injection - PHP Example

Remote Code Vulnerability 0:03:30

Remote Code Vulnerability Analysis with SAP NetWeaver AS, add-on for code vulnerability analysis 7.5

INDUS Defeat the 0:52:41

INDUS Defeat the Hacker SIG - Secure Software Development LiveCycle for custom code application

Command Injection - 0:20:12

Command Injection - Lab #1 OS command injection, simple case | Long Version

65. Command Injection 0:06:45

65. Command Injection - Rails Example

Senior Programmers vs 0:00:34

Senior Programmers vs Junior Developers #shorts

[Security] Command Injection 0:07:53

[Security] Command Injection over WebGoat

Martin Rakhmanov - 0:20:15

Martin Rakhmanov - Exploiting SAP ASE via SQL injections in database core

Stealth Command Injection 0:09:03

Stealth Command Injection Leveraging nslookup - Tom Heffron

Blind OS command 0:02:32

Blind OS command injection with out of band interaction (Video solution, Audio)

SAP Cyber Security 0:01:26

SAP Cyber Security Risk - OS COMMAND

ABAP Test Seam 0:05:21

ABAP Test Seam

Command Injection URI 0:00:43

Command Injection URI on MSN

SAP Exploit Series: 0:02:07

SAP Exploit Series: Hidden OK Codes

SAP ABAP, Executing 0:07:19

SAP ABAP, Executing the OS Command and getting the result in ABAP Program

Zyxel Firewall Unauth 0:00:26

Zyxel Firewall Unauth Command Injection (CVE-2022-30525) PoC

Make CodeProfiler for 0:43:53

Make CodeProfiler for ABAP fit into your development process

Nesting 'If Statements' 0:01:00

Nesting 'If Statements' Is Bad. Do This Instead.

Why aren’t my 0:49:26

Why aren’t my tests stable? - Test Isolation with the ABAP Unit Framework

Комментарии
Автор

Check out our free whitepaper download: "The ABAP Underverse"

Virtualforge